The breach itself was announced shortly after it was discovered: https://stackoverflow.blog/2019/05/16/security-update/ https://stackoverflow.blog/2019/05/16/se

The breach itself was announced shortly after it was discovered: https://stackoverflow.blog/2019/05/16/security-update/ https://stackoverflow.blog/2019/05/16/security-update/ And affected users were notified once identified, which was shortly after the announcement: https://stackoverflow.blog/2019/05/17/update-to-security-incident-may-17-2019/ https://stackoverflow.blog/2019/05/17/update-to-security-inc... This is an update with more details, which was held back for legal reasons.